Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.mft
File: qlTEdj6gGMPccCA9BO_nH9SxsGY.mft (raw, json)
Hash identifier: T2g37voWDaMZXUwvtbIzbJUnZPuLcZls81fSb2rEX3Y=
Subject key identifier: A3:8E:31:03:05:CC:87:82:D2:D7:4E:E1:F0:EF:86:BF:D8:43:51:4E
Authority key identifier: AA:54:C4:76:3E:A0:18:C3:DC:70:20:3D:04:EF:E7:1F:D4:B1:B0:66
Certificate issuer: /CN=aa54c4763ea018c3dc70203d04efe71fd4b1b066
Certificate serial: 01A0CEC817C66C9A61CF5010EF031076E801
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlTEdj6gGMPccCA9BO_nH9SxsGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.mft
Manifest number: 174A
Signing time: Wed 23 Sep 2026 15:00:14 +0000
Manifest this update: Wed 23 Sep 2026 15:00:14 +0000
Manifest next update: Thu 24 Sep 2026 15:00:14 +0000
Files and hashes: 1: bZqOUIU_1IqMOnS3XXUrS60GrpM.roa (hash: LFmDzSYfJ7mk0ygK5bmtim3i/wVzAaEknmN17hltFu0=)
2: qlTEdj6gGMPccCA9BO_nH9SxsGY.crl (hash: +DleguUdYw3WhW4V/t9VDz+EpaLR0Y9LuNNB824WosI=)
3: qxRVneBb_uUd_NsM3Vb645rM-7A.roa (hash: G6Y/r+hYk+mMByjpNJdV1U1ctvTf0yt3EQ8Sq5betwQ=)
4: sPMgSkKer_29geM5-1T1-keLLGw.roa (hash: 4QbBQJWJYkQw7XP4lLebE7Woxf8+43i+sSWLrzO/9j0=)
5: tP-zd4fvUG5Ghj_hj4jy-iA0H5M.roa (hash: dncyiHvUZh8Otlmg0Vs+Wpy7Azdi/J7dNn/2EsRGlWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qlTEdj6gGMPccCA9BO_nH9SxsGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:c8:17:c6:6c:9a:61:cf:50:10:ef:03:10:76:e8:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa54c4763ea018c3dc70203d04efe71fd4b1b066
Validity
Not Before: Sep 23 15:00:14 2026 GMT
Not After : Sep 24 15:00:14 2026 GMT
Subject: CN=a38e310305cc8782d2d74ee1f0ef86bfd843514e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:d1:a3:2e:38:2d:68:56:f2:24:b7:47:bb:a2:
a2:14:35:6a:f8:96:48:14:01:43:04:c6:6a:6d:65:
72:a9:0c:82:72:3b:c1:5e:7d:e1:14:68:63:9a:c5:
c9:0b:a2:d5:8b:b3:2e:77:75:90:3d:2b:06:e7:64:
e2:4c:2b:a4:31:8e:9b:c0:32:f4:99:57:ca:f1:46:
7f:f0:7b:cf:a6:ad:bc:d6:00:d7:a2:c6:be:25:a9:
9f:67:b7:d4:16:3d:64:2f:12:8d:3f:18:82:5d:5b:
d6:63:26:65:44:df:2f:07:d3:95:21:f7:79:8a:a0:
72:0b:d0:05:b5:01:05:dd:7f:11:bb:be:12:6f:a4:
ab:e7:1b:f0:74:49:7c:8a:07:aa:87:91:53:2e:d1:
20:b1:93:17:ce:e9:1d:a6:c6:8b:9d:14:9f:ed:15:
c1:b9:1c:ea:e6:91:94:ee:09:3e:68:d3:3f:1f:66:
64:3c:84:9a:f4:0f:12:e0:e4:d2:8d:21:3d:07:bd:
c2:53:c2:96:22:f4:cd:70:44:ae:cb:6c:54:18:83:
4e:74:0c:3d:cc:4d:bb:78:7d:03:c5:3b:79:1b:37:
eb:10:73:f0:b0:5c:17:b4:11:3b:c4:da:f4:09:b7:
a4:53:60:ff:2c:2e:86:55:49:05:9c:80:39:65:b0:
9c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:8E:31:03:05:CC:87:82:D2:D7:4E:E1:F0:EF:86:BF:D8:43:51:4E
X509v3 Authority Key Identifier:
keyid:AA:54:C4:76:3E:A0:18:C3:DC:70:20:3D:04:EF:E7:1F:D4:B1:B0:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlTEdj6gGMPccCA9BO_nH9SxsGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:82:ba:fb:6d:fb:15:61:7b:5a:37:08:83:d2:69:ec:96:2b:
36:60:ca:77:53:72:65:90:ca:3d:d3:e0:46:b4:af:5b:1c:15:
a9:9d:9d:86:e7:99:29:b5:c5:1e:16:71:39:d4:2e:64:75:78:
5b:9c:61:e7:7f:35:de:a5:a6:49:9b:fe:11:12:53:06:5a:89:
5b:8b:f3:46:af:ab:1e:07:8f:79:70:cb:73:3a:03:da:48:a1:
b9:f7:f8:22:24:3c:05:11:23:69:02:8d:ff:99:be:74:35:aa:
4b:b4:24:69:43:0c:89:37:52:80:ee:a9:77:20:ff:a6:3d:dc:
b3:9b:10:79:44:49:d6:5e:a6:f8:fb:fe:71:fd:5a:91:05:00:
3f:83:b9:1b:01:b4:b6:3d:8b:5e:a2:95:35:51:18:78:58:20:
c8:fe:e7:ce:ae:1c:6f:bc:20:7d:6d:54:44:5a:a2:3d:a4:fa:
ab:c2:11:9d:6e:71:ea:92:26:c9:40:2f:8f:0d:d4:e6:25:07:
9f:15:89:40:13:08:74:28:40:ee:35:58:e7:c9:6a:f3:f2:47:
f1:93:2e:5e:93:10:77:1d:13:f3:4b:3a:ec:6f:f3:88:fd:19:
e5:90:f6:9b:6a:45:11:fc:f7:49:45:31:cf:6b:59:33:cb:03:
87:08:32:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:07:00 2026 by rpki-client